Firewall configuration fedora

NewFedoraUser5 · 11-13-2013, 11:17 AM

hi

in network zone i chose block zone is this can do problem with software's or with fedora update or is only block the Lan?

in ICMP filter which option i need to enable for more security?

http://i40.tinypic.com/2dbt2mt.png

John VV · 11-13-2013, 01:20 PM

Normally fedora's default settings are fine , and a bit of over kill.
You will often find you need to open ports .

and what "zone" are you blocking ?

https://fedoraproject.org/wiki/How_t...iptables_rules

http://docs.fedoraproject.org/en-US/...Security_Guide

NewFedoraUser5 · 11-13-2013, 03:19 PM

can you pls answer the question about icmp filter
or at least tell me what setting you apply in the icmp filter

John VV · 11-13-2013, 05:01 PM

well you have "unreachable " highlighted
put a check in it if YOU DO NOT WANT A ERROR MASSAGE ABOUT UNREACHABLE ADDRESSES
otherwise
leave everything unchecked to RECEIVE the error massage

NewFedoraUser5 · 11-14-2013, 02:43 AM

in my windows machine was firewall comodo that have icmp filter that block ping and port scan,

John VV · 11-14-2013, 12:57 PM

IPtables is already set by default to "stealth block" all ports

a "ping" will return NO answer on a request .
and any port scan will AUTOMATICALLY not return any info .
It will NOT inform the scanner that a port is open or closed .
It will just NOT respond .

That is the default settings

linux is NOT windows

NewFedoraUser5 · 11-15-2013, 06:22 AM

i did zenmap to myself and this results :

68/udp open|filtered dhcpc
631/udp open|filtered ipp
5353/udp open|filtered zeroconf
49166/udp open|filtered unknown

how i can be sure that none of them is open?

should i make rules in the firewall and deny them?

John VV · 11-15-2013, 01:41 PM

Quote:

68/udp open|filtered dhcpc
631/udp open|filtered ipp
5353/udp open|filtered zeroconf
49166/udp open|filtered unknown

how i can be sure that none of them is open?

then CLOSE the ports you opened in the firewall

you already OPENED those ports in the firewall
if you want to close them
remove the statements that you added to open them